Commit Graph

8 Commits

Author SHA1 Message Date
Petr Menšík
3fb3b2d2bd Prevent assertion failure if DNS64 and serve-stale is used
Enabling both DNS64 and serve-stale may cause an assertion failure
during recursive resolution.

6317.	[security]	Restore DNS64 state when handling a serve-stale timeout.
			(CVE-2023-5679) [GL #4334]

Resolves: RHEL-25370
; Resolves: CVE-2023-5679
2024-02-21 20:57:48 +01:00
Petr Menšík
b734ab50d3 Prevent assertion failure when nxdomain-redirect is used with
RFC 1918 reverse zones

6316.	[security]	Specific queries could trigger an assertion check with
			nxdomain-redirect enabled. (CVE-2023-5517) [GL #4281]

Resolves: RHEL-25359
; Resolves: CVE-2023-5517
2024-02-21 20:57:48 +01:00
Petr Menšík
6f864801ac Prevent increased CPU load on large DNS messages
6315.	[security]	Speed up parsing of DNS messages with many different
			names. (CVE-2023-4408) [GL #4234]
6321.	[security]	Change 6315 inadvertently introduced regressions that
			could cause named to crash. [GL #4234]
6343.	[bug]		Fix case insensitive setting for isc_ht hashtable.

Resolves: RHEL-25348
; Resolves: CVE-2023-4408
2024-02-21 20:57:27 +01:00
Petr Menšík
8b3181e49e Fix CVE-2023-3341
6245.   [security]      Limit the amount of recursion that can be performed
                        by isccc_cc_fromwire. (CVE-2023-3341) [GL #4152]

Resolves: RHEL-5246
2023-09-20 16:29:27 +02:00
Petr Menšík
7daed14418 Fix CVE-2023-2828
6190.	[security]	Improve the overmem cleaning process to prevent the
			cache going over the configured limit. (CVE-2023-2828)
			[GL #4055]

Resolves: rhbz#2216654
2023-09-04 15:08:41 +02:00
Troy Dawson
123c2393a3 Bring gating.yaml over from Brew dist-git
Signed-off-by: Troy Dawson <tdawson@redhat.com>
2023-03-10 10:28:32 -08:00
CentOS Sources
f85e47fe2c Auto sync2gitlab import of bind9.16-9.16.23-0.14.el8.src.rpm 2023-02-28 18:12:03 +00:00
James Antill
29cf07efaf Import rpm: c8s 2023-02-27 12:22:46 -05:00